Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d0dd2fa1-1d84-33f7-ba2e-03dbbfa0679f.roa
File:                     d0dd2fa1-1d84-33f7-ba2e-03dbbfa0679f.roa (raw, json)
Hash identifier:          v3xS3iSyN/ZrsbGB9lLna5IIl880z1MI8Eg4Pc6bD8o=
Subject key identifier:   2D:C3:13:AF:DF:4B:45:23:67:2E:E6:8F:0E:21:BC:B0:02:D6:C5:08
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFA3646CD408758690900
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d0dd2fa1-1d84-33f7-ba2e-03dbbfa0679f.roa
Signing time:             Mon 16 Jun 2025 16:03:19 +0000
ROA not before:           Mon 16 Jun 2025 16:03:19 +0000
ROA not after:            Sun 14 Sep 2025 16:03:19 +0000
asID:                     81
IP address blocks:        152.26.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:fa:36:46:cd:40:87:58:69:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:19 2025 GMT
            Not After : Sep 14 16:03:19 2025 GMT
        Subject: CN=094463ca-bea0-47e5-bb1c-05207fd69fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:42:9d:29:32:51:c5:f8:d1:29:2e:e6:3a:
                    de:70:0d:bd:25:3a:d9:ab:b9:9c:6a:39:d4:b0:16:
                    fc:d8:9d:7e:a9:ee:8e:66:a5:32:cd:5a:97:73:4f:
                    c9:22:44:ac:34:a6:31:17:e1:c4:c6:ab:92:b9:3b:
                    f2:b1:d2:e4:db:d6:e2:72:b1:87:b5:ad:52:60:2a:
                    c1:2f:42:c2:5a:a5:d0:9b:d9:59:9c:40:99:16:d7:
                    22:1c:57:16:f2:11:f2:6a:a1:01:75:88:df:52:0b:
                    85:e5:e9:50:64:6c:80:0a:eb:39:0e:37:ab:55:0d:
                    86:7d:63:4b:0f:4a:2e:04:19:aa:03:32:da:7b:60:
                    1d:8a:0f:5e:f1:c6:86:13:60:bd:ab:78:3b:a0:69:
                    61:ab:38:f6:cb:77:ba:25:93:22:f2:6a:1d:a7:78:
                    32:9d:13:e5:62:b4:07:34:59:9b:0e:f7:49:0a:66:
                    2c:0b:0a:da:42:b3:85:84:54:fc:e3:cd:1c:1f:33:
                    5e:12:eb:7e:75:fc:fb:7b:14:93:59:e7:94:47:57:
                    9e:2f:b6:87:71:43:37:23:b2:b1:8c:b1:53:4f:41:
                    a2:64:ff:b4:78:b5:81:21:d8:7d:32:ad:19:f5:39:
                    e1:79:c0:39:9e:2e:ad:e6:06:9b:82:1d:59:1e:f4:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:13:AF:DF:4B:45:23:67:2E:E6:8F:0E:21:BC:B0:02:D6:C5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d0dd2fa1-1d84-33f7-ba2e-03dbbfa0679f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:54:48:e7:1e:19:2a:02:3d:61:00:3e:48:bc:3b:65:c4:aa:
         fa:c9:4f:d9:8c:b7:ce:86:77:41:9b:4d:00:00:b1:cc:eb:99:
         0c:fc:14:b0:51:6c:02:2a:53:a5:b9:da:ed:03:b1:8f:92:c4:
         04:d5:cc:37:14:e0:a8:d6:4c:76:a9:41:82:05:46:41:64:c5:
         ee:73:06:ad:86:2b:94:9f:2f:76:0d:7b:75:74:61:3e:f3:1d:
         8c:4d:58:3a:c2:65:5b:96:59:38:5a:6f:cd:a2:1a:fc:4f:58:
         4f:94:19:7a:2a:ae:ea:c7:14:ec:d9:54:a5:be:60:be:84:ef:
         59:d0:d1:00:56:8e:69:a9:25:e7:a2:e9:61:c6:5f:0d:7f:90:
         21:db:13:57:4b:25:1a:e6:ba:46:7e:fe:d1:fa:bc:0f:c4:0e:
         7c:a6:bd:17:42:84:8d:a8:0a:0b:2c:77:21:aa:f4:44:b1:42:
         fa:95:a1:88:49:dc:3a:ea:38:e0:a5:2e:7f:a7:53:4a:02:71:
         b7:fe:57:cf:05:60:01:08:70:28:68:f9:28:3a:2d:61:28:26:
         d0:e8:96:53:24:70:a4:d7:42:b7:6a:b8:38:d6:11:07:35:e5:
         c7:64:e3:c4:1e:64:4b:71:78:ba:19:d6:67:07:e0:7e:7f:f0:
         08:bf:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:45:45 2025 by rpki-client